Search @monkehack | teapawt

I won Best Chrome VRP Researcher at Bugswat Singapore! I also shared Best Meme with @inspector_amb. I’ll be talking (in abstract) about some of my exfiltration and guardrail bypassing techniques at NahamCon in California next month!

13

167

2,547

Ciarán Cotter retweeted

private keys from 8 intermediate CA certs have been compromised (eMudhra) Happy "Update everything" day to all my pager-carrying friends emudhra.we-have-a-problem.co…

93

5,166

4,651,138

@monkehackOct 20

Replying to @joaxcar @rez0__

RIP

77

@monkehackOct 20

Replying to @zack0x01_

This seems to be a program decision, not a HackerOne decision

4

395

@monkehackOct 19

Replying to @rez0__

It would be a net good because the companies would be a bit nicer to us if their fuckups got millions of impressions

4

320

@monkehackOct 19

I’m liking this recent trend of people outside the bug bounty community calling out the low max bounties of some very large companies.

4

74

3,660

@monkehackOct 9

Replying to @pxmme1337

🔥

1

1

622

@monkehackOct 8

Replying to @PikuHaku

That’s CRAZY lmao. “Why yes, this data only RESEMBLES all of our customer PII”

1

2

382

@monkehackOct 8

As someone who got an N/A yesterday because the company decided that my 0-day wasn’t their responsibility, limiting based on N/As is definitely not the right way.

Angel Montes@_N0xi0us_Oct 8

Replying to @Bugcrowd

@Bugcrowd is becoming the anti-platform. Using N/A to calculate accuracy and limit reports is terrible. Soon, many researchers may not be able to submit reports. How they use N/A: • Took 20 days + fixed → N/A • No time to understand → N/A • Don’t understand scope → N/A

3

58

4,133

@monkehackOct 4

Replying to @pxmme1337

@pxmme1337 made a card game based on Wikipedia and it's ridiculously addictive. He's looking for feedback so do him a favour and check it out (and do me a favour and use my invite link, I'm addicted to it): kosmora.io/r/vjexxnrf

monke invited you to Kosmora

Kosmora is a card game where every card is a Wikipedia article. Start with 20 packs, plus 3 friend packs and 500 Kosmo from monke.

15

1,356

Ciarán Cotter retweeted

@pxmme1337Oct 3

I accidentally got addicted to my own game ffs kosmora.io

Kosmora: the Wikipedia collectible card game

Kosmora is an online collectible card game where every card is a Wikipedia article. Collect people, places and ideas, complete families and trade cards.

6

791

Ciarán Cotter retweeted

Logan Kilpatrick

@OfficialLoganKSep 30

Introducing Gemini 4 Argon, our new frontier model, rolling out to cyber defenders starting today, and more widely as soon as possible. I am really excited by the progress we have made here. Argon is priced at $2 in and $10 out during introductory pricing!

1,033

14,807

1,638,663

@monkehackSep 24

🐵 MonkeHacks #101 Cork LHE, Moving, Prompt2Pwn monke.ie/p/monkehacks-101 #bugbountytips #hacktheplanet #BugBounty

2

47

2,040

@monkehackSep 14

Bug bounty these days is like: "We regret to inform you that BigStinkyCompany is pausing all submissions until further notice. We're excited to add "subdomain.stinky.com" to our assets after this break, but we're lowering our Medium and Low payouts in line with industry standards"

5

72

3,648

@monkehackSep 8

Replying to @rez0__

Extension kits for the microduck might be popular. Here is one to voltron five ducks into a macroduck.

2

928

@monkehackSep 7

Replying to @caffeinedoom @rapid7

HackerOne’s mobile UI hasn’t worked well in living memory

2

86

@monkehackSep 7

I wish more tokens were spent on making existing software more efficient instead of generating new slop code

3

31

1,756

@monkehackSep 7

Replying to @LiveOverflow

I tried but it rejected my attempts to get ID verified again

7

1,146

@monkehackSep 2

Replying to @S1r1u5_

This type of thinking extends to other fields too, as evidenced by GPT using techniques from other areas of mathematics to solve unsolved problems

3

389

@monkehackSep 1

Protonmail outage ☹️

1

7

1,290